Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File:                     9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier:          pW3zhGXfAMU7C4eGQ1A/xh+j84XEntXVcJ0MVSmKCdQ=
Subject key identifier:   7A:A0:89:27:60:B2:78:46:66:BD:68:DB:40:04:1D:FA:99:AF:43:FC
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer:       /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial:       01A144284F0D3F618C9A1DA3C52B4428967E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number:          158F
Signing time:             Fri 16 Oct 2026 10:00:54 +0000
Manifest this update:     Fri 16 Oct 2026 10:00:54 +0000
Manifest next update:     Sat 17 Oct 2026 10:00:54 +0000
Files and hashes:         1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: QQcJVTIUhjtQc8ok+Puay2Sax+J5P9qLi3sG2+/IXy4=)
                          2: WKo0w-hQA_6GqLwkYTSFOaF2igk.roa (hash: dXRlU5jeDW7rQk8xbfzgMgBkQT5Cb93wKPdp+cZ/mBg=)
                          3: ksOPh_2fTunNVDQ0M7oZsMXzMTc.roa (hash: sTuOVD56/9SfiXVEt5t0X+gpGj1raLEEP3xJmICtW0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:44:28:4f:0d:3f:61:8c:9a:1d:a3:c5:2b:44:28:96:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
        Validity
            Not Before: Oct 16 10:00:54 2026 GMT
            Not After : Oct 17 10:00:54 2026 GMT
        Subject: CN=7aa0892760b2784666bd68db40041dfa99af43fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e2:79:e5:90:01:99:cb:8a:c8:c0:4d:6f:b5:
                    99:c0:cc:c5:e6:ef:27:0e:12:2a:74:76:ac:d8:4a:
                    d3:bd:93:11:55:da:06:73:33:a4:72:34:19:1f:5e:
                    45:56:68:38:34:43:36:55:ee:df:bb:5b:03:55:13:
                    7f:35:67:ef:cb:d3:f6:60:ef:ae:35:f0:19:3b:5c:
                    ca:39:ed:ca:b0:ee:5d:47:ab:c6:15:bc:71:da:a8:
                    b0:f8:70:a3:66:1b:19:a4:d6:7c:3d:cf:ce:5d:c5:
                    eb:43:d4:3f:1a:e9:c5:89:0e:d3:40:a5:c4:cb:32:
                    4e:db:84:98:c0:59:8d:16:39:fc:31:3d:b6:41:53:
                    82:47:86:36:96:82:4a:19:2b:c7:b5:67:33:eb:68:
                    89:54:45:18:b4:4f:7f:a7:b3:ca:f0:a1:92:53:8c:
                    44:68:fe:40:34:59:a7:1e:18:d1:85:06:9f:cc:00:
                    07:68:18:82:8d:fe:ef:7f:11:bd:68:96:60:6b:a2:
                    be:58:42:4d:76:69:6c:ca:01:3b:e6:63:ae:18:53:
                    58:da:5b:8e:3c:aa:99:db:ff:b5:da:ec:f8:97:38:
                    5e:59:e8:4e:13:7e:79:14:c7:a9:8e:a9:1a:80:1d:
                    f8:61:1a:f5:a6:07:a0:fe:97:01:49:1a:ed:cb:ee:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A0:89:27:60:B2:78:46:66:BD:68:DB:40:04:1D:FA:99:AF:43:FC
            X509v3 Authority Key Identifier:
                keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:19:e6:5f:f7:c7:45:c3:7e:c5:e6:ff:80:96:d6:6e:68:3b:
         b1:e2:b8:94:c5:9f:66:df:03:7e:89:6f:4d:5b:6f:3b:cf:5c:
         bb:73:6f:48:f6:2b:6d:74:0f:be:a8:34:24:48:32:2f:e0:22:
         7f:02:4e:c6:2d:ef:d1:70:5e:79:d1:f0:71:5c:8c:bb:40:63:
         75:f2:db:6e:3e:6f:f4:ba:39:ef:df:3e:91:24:f4:65:37:55:
         7f:75:23:d6:9f:b3:28:fb:6e:96:ed:33:b2:11:55:8d:66:7d:
         b3:11:10:94:09:b5:63:c5:e3:f7:90:c5:69:f8:68:43:5e:6a:
         43:8d:57:18:f1:00:75:ca:5c:2f:f2:30:23:9d:29:3b:b4:6a:
         0c:06:49:83:ba:c1:21:82:d0:c5:26:43:f4:04:2d:75:5b:01:
         29:f8:df:66:bd:95:31:a6:74:86:6c:bb:e3:a6:eb:de:e8:fb:
         6f:89:29:1f:c2:3c:cf:11:ea:37:19:ec:d1:72:84:2b:b8:38:
         96:fb:da:21:85:0d:1f:c2:d0:1f:fc:d6:c8:8b:0a:29:d4:64:
         64:88:d2:42:3d:60:08:0f:b2:f5:5f:b0:6e:99:a5:e7:16:94:
         4e:e2:d2:32:42:96:d9:e1:4e:2a:a3:4e:1a:f5:e0:43:fe:a2:
         b2:69:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:39:57 2026 by rpki-client